Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/492d9e93-863b-3776-aed0-d0e8b848e313.roa
File:                     492d9e93-863b-3776-aed0-d0e8b848e313.roa (raw, json)
Hash identifier:          h5MqLw5ib0qe9enPGDjxJe52Tlqw2Op7z8soGJjWwOA=
Subject key identifier:   A1:31:77:6A:B3:D9:54:0D:5D:0C:06:4E:42:55:CC:5B:62:7A:D3:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA3A982D3E82E394591B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/492d9e93-863b-3776-aed0-d0e8b848e313.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        96.113.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:3a:98:2d:3e:82:e3:94:59:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=2376fb82-e384-439a-bf54-686af386b974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:89:92:89:a8:09:37:3c:84:b1:b4:63:5d:
                    1d:e1:48:c9:c4:76:f9:34:e5:e7:49:90:f2:4e:72:
                    09:74:26:ef:c5:9d:60:59:64:83:65:90:3f:1d:6f:
                    a3:27:73:b3:82:ef:e4:f6:1d:89:2b:8c:b8:86:42:
                    94:26:60:3e:d7:7e:3d:bf:15:1f:19:ef:72:4d:6e:
                    d5:88:04:68:91:e3:64:73:5e:91:bd:c0:89:5f:69:
                    0c:55:aa:d5:b4:c4:c2:a5:79:71:0e:8f:9c:af:ac:
                    8c:86:0e:b5:8e:25:94:73:5a:54:6e:b2:63:82:fb:
                    5e:f7:be:56:ac:77:4c:9f:b2:67:b2:54:3a:2d:27:
                    e5:d0:a4:4f:b9:bf:f9:c0:1c:25:32:9a:cf:75:f7:
                    7e:d0:a7:7f:3c:76:f1:08:a3:86:95:36:dc:32:b5:
                    67:25:44:f2:81:ee:96:45:fb:f7:1b:a3:ee:4d:a5:
                    6a:1c:3f:32:eb:49:41:7b:ef:30:81:da:1b:a5:a1:
                    6d:c2:bd:18:9c:5d:ab:5f:30:8a:1c:de:9e:e8:90:
                    cc:35:7d:84:ff:9d:78:d2:bf:c4:65:2b:59:97:ef:
                    96:ea:76:52:95:d9:4b:95:f8:18:22:5d:99:b0:cd:
                    3e:17:9c:60:16:0d:1b:ab:e8:f1:1a:d6:c1:96:6a:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:31:77:6A:B3:D9:54:0D:5D:0C:06:4E:42:55:CC:5B:62:7A:D3:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/492d9e93-863b-3776-aed0-d0e8b848e313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:51:4c:da:bb:42:65:c0:f0:35:02:83:e0:47:ce:63:b4:1f:
         dd:ee:89:b7:e6:96:0b:0a:a9:ce:a2:74:c1:b8:d2:82:bc:5c:
         04:dd:23:8b:cb:a2:9e:09:2b:e3:6a:02:e8:bb:9f:76:e7:32:
         88:fd:e9:e3:94:f0:5e:aa:2d:2b:0f:c6:d2:f1:90:0d:50:62:
         a7:ba:7d:e5:a4:22:54:34:eb:e9:5c:fc:ca:b3:08:5b:48:6a:
         05:e2:be:c9:24:13:54:39:5b:00:1d:31:c9:d3:1f:03:3c:9d:
         32:87:70:89:af:6e:2a:60:0e:b9:17:a4:c5:61:c9:f6:e0:b5:
         98:97:92:ce:d8:f1:04:26:69:9a:bd:f4:d8:15:39:fc:ba:d6:
         93:49:53:ae:b3:9c:d8:43:74:e5:4a:e5:e2:96:bd:62:da:f0:
         b1:20:24:1e:a6:30:6e:74:5b:c2:c7:05:d7:75:3d:07:71:55:
         a0:f9:d3:b6:da:61:82:14:c3:59:c1:7a:ac:a3:46:93:b1:7a:
         8b:24:45:ee:1c:e8:07:87:15:43:0f:f1:10:7c:4f:98:35:1e:
         a3:df:a8:9a:44:60:59:1e:9c:8a:96:34:76:23:b3:ee:9b:8d:
         7b:da:e1:5f:75:e6:de:cd:0c:d4:dc:81:11:1f:8c:82:8b:ad:
         7c:dd:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:31:13 2026 by rpki-client